Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: Pu1h3izfKp3aBfH3iNf6cr6aL1Rn4PDmNfNpY8FJInc=
Subject key identifier: EA:67:25:A6:84:58:9B:0C:56:04:C4:B7:6E:C2:1F:5A:E2:92:E0:54
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019D25838538CF18CD791E97D4DF5817B705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 052D
Signing time: Wed 25 Mar 2026 15:01:09 +0000
Manifest this update: Wed 25 Mar 2026 15:01:09 +0000
Manifest next update: Thu 26 Mar 2026 15:01:09 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: GIgY+PpUaI+U+yf32qv7Sc6Fx5idY6KsVA7rOqRlrN8=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:85:38:cf:18:cd:79:1e:97:d4:df:58:17:b7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Mar 25 15:01:09 2026 GMT
Not After : Mar 26 15:01:09 2026 GMT
Subject: CN=ea6725a684589b0c5604c4b76ec21f5ae292e054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:59:8d:64:c3:dd:30:2e:45:d2:a7:5b:18:
d8:93:e3:29:b3:97:c2:ab:d7:52:22:85:8a:e2:aa:
52:ca:75:83:b3:79:80:87:90:1c:20:ca:e8:21:7f:
b8:d1:6b:77:f6:8a:5e:b2:b9:bd:44:ba:64:d7:6b:
4a:8d:7a:22:4b:81:2f:02:5c:01:55:90:b8:ac:87:
d5:f9:9b:23:30:7b:6d:27:06:12:63:b9:31:3e:1e:
49:44:2b:2f:5a:c3:7f:93:88:3c:08:f8:09:81:f8:
a9:c1:4b:31:33:34:fe:89:98:47:a2:58:27:19:af:
82:10:09:3d:6c:27:35:e3:e3:37:b3:7f:77:e9:10:
4f:67:bd:e4:26:1e:be:f5:aa:9d:08:04:73:c0:8f:
70:76:25:5a:e9:e9:68:bc:25:e9:9a:30:49:9d:c9:
b0:5c:87:96:ee:3b:b9:37:04:2f:e2:0a:1e:1d:2c:
dc:1a:83:a2:63:21:f2:e6:06:76:94:cd:fb:ea:ff:
88:88:ef:bb:06:95:69:a1:c6:aa:42:a8:b5:42:a8:
34:64:fb:dc:2f:cb:03:14:a6:23:bc:0a:79:04:d8:
00:ff:86:98:1f:74:ef:e9:91:ce:fe:e5:b7:dd:b2:
95:bb:f8:6f:77:c4:f4:05:35:22:cb:8a:61:ed:cc:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:25:A6:84:58:9B:0C:56:04:C4:B7:6E:C2:1F:5A:E2:92:E0:54
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ab:15:f4:bc:4a:0d:e3:c2:7d:a4:dc:d9:ad:e2:c0:60:78:
80:81:d3:a5:59:5c:21:48:29:48:65:72:c6:c6:ca:dc:9b:4e:
52:d8:cf:0b:c7:90:b9:e5:d0:55:53:a9:92:d0:a6:e0:42:1c:
f3:fc:3e:04:54:d0:7d:4a:27:44:d4:4e:b5:97:c5:eb:ca:51:
87:19:72:e3:0f:b1:d3:42:55:ac:4f:21:02:34:2d:8b:3e:e8:
ad:19:00:f8:2f:55:24:aa:05:28:a0:75:31:34:0f:5a:a9:10:
d8:b6:19:24:99:74:70:82:b6:bc:42:c3:44:74:7b:a8:d4:68:
b6:ec:31:c5:00:2f:e3:b4:d2:2c:83:72:97:01:33:5e:84:b5:
7b:b8:c6:ab:a1:6c:31:7d:c3:78:8f:e4:7c:fb:6a:e6:78:5a:
fe:99:11:c7:3b:3f:fe:55:f6:d6:7d:93:ef:a4:fa:c6:b0:9f:
e2:e9:f2:af:a2:61:8d:c7:17:19:26:d7:71:d3:8b:bb:1d:13:
62:75:ab:a8:12:49:05:e3:e4:6a:67:b3:0d:6d:1b:20:30:a1:
3d:45:7b:c1:9b:4e:3e:1a:97:25:f1:ef:02:ef:b4:b7:0c:3b:
6a:91:f0:7b:7c:f7:44:1c:c8:95:de:40:b3:65:1b:9b:92:36:
73:ef:d5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:57 2026 by rpki-client